Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-28 10:33Z
2019-05-03
2019-05-03 15:29Z
HIGH

CVE-2018-15388 — Cisco Adaptive_security_appliance_software: A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-15388

A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing load for existing WebVPN login operations. An attacker could exploit this vulnerability by sending multiple WebVPN login requests to the device. A successful exploit could allow t CVSSv3.1 8.6 (HIGH) · EPSS 78th percentile

CWECWE 400VNDCiscoVNDWebvpnTYPVulnerability
8.6
CVSS v3.1
94
Edit Score
2019-05-02
2019-05-02 20:29Z
CRIT

CVE-2018-16988 — Buffalo Open_xdmod: An authentication bypass (account takeover) exists due to a weak password reset mechanism.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-16988

An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force attack against an MD5 rid value requires only 600 guesses in the plausible situation where the attacker knows that the victim has started a password-reset process (pass_reset.php, password_reset.php, XDUser.php) in the past few minutes. CVSSv3.1 9.8 (CRITICAL) · EPSS 54th percentile

CWECWE 640VNDBuffaloTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2019-04-26
2019-04-26 19:29Z
CRIT

CVE-2019-2725 — Oracle Agile_plm: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-2725in the wild

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts) CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 74VNDOracleVNDVulnerabilityTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2019-04-10
2019-04-10 20:29Z
CRIT

CVE-2019-11068 — Xmlsoft Libxslt: through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-11068

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded. CVSSv3.1 9.8 (CRITICAL) · EPSS 78th percentile

VNDCanonicalVNDXmlsoftTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2019-04-09
2019-04-09 21:29Z
HIGH

CVE-2019-0752 — Microsoft Internet_explorer: A remote code execution vulnerability exists in the way that the scripting engine handles

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-0752in the wild

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862. CVSSv3.1 7.5 (HIGH) · EPSS 100th percentile

CWECWE 843VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.5
CVSS v3.1
100
Edit Score
2019-04-01
2019-04-01 17:47Z
HIGH

impacket 0.9.19

Impacket releases·github.com

Impacket 0.9.19 release adds significant offensive capabilities including resource-based constrained delegation support in GetST.py, NTLM relay improvements with local admin checks, SMB mount point abuse features, and enhanced credential extraction tools. The release represents incremental but meaningful improvements to a foundational red-team toolkit used extensively in domain compromise chains.

TACTA0004SRFNetworkTACTA0006SRFIdentityTACTA0008VNDImpacketTYPToolSTGPrivesc
72
Edit Score
2019-03-25
2019-03-25 19:29Z
HIGH

CVE-2019-3857 — Libssh2 Libssh2: An integer overflow flaw which could lead to an out of bounds write was

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-3857

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. CVSSv3.1 8.8 (HIGH) · EPSS 93th percentile

CWECWE 787CWECWE 190VNDNetappVNDLibssh2TYPVulnerability
8.8
CVSS v3.1
96
Edit Score
728 × 90 / responsive · programmatic ad slot
2019-03-25
2019-03-25 19:29Z
HIGH

CVE-2019-3856 — Libssh2 Libssh2: An integer overflow flaw, which could lead to an out of bounds write, was

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-3856

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. CVSSv3.1 8.8 (HIGH) · EPSS 93th percentile

CWECWE 787CWECWE 190VNDNetappVNDLibssh2TYPVulnerability
8.8
CVSS v3.1
96
Edit Score
2019-03-23
2019-03-23 18:29Z
CRIT

CVE-2019-9948 — Python Python: urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-9948

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call. CVSSv3.1 9.1 (CRITICAL) · EPSS 96th percentile

CWECWE 22TYPVulnerability
9.1
CVSS v3.1
99
Edit Score
2019-03-21
2019-03-21 21:29Z
HIGH

CVE-2019-3855 — Libssh2 Libssh2: An integer overflow flaw which could lead to an out of bounds write was

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-3855

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. CVSSv3.1 8.8 (HIGH) · EPSS 95th percentile

CWECWE 787CWECWE 190VNDFedoraprojectVNDLibssh2TYPVulnerability
8.8
CVSS v3.1
97
Edit Score
2019-03-21
2019-03-21 16:01Z
CRIT

CVE-2019-3859 — Libssh2 Libssh2: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-3859

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. CVSSv3.1 9.1 (CRITICAL) · EPSS 93th percentile

CWECWE 125VNDFedoraprojectVNDLibssh2TYPVulnerability
9.1
CVSS v3.1
97
Edit Score
2019-03-21
2019-03-21 16:00Z
HIGH

CVE-2018-12023 — Fasterxml Jackson-databind: An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-12023

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload. CVSSv3.1 7.5 (HIGH) · EPSS 95th percentile

CWECWE 502VNDOracleVNDFedoraprojectVNDFasterxmlTYPVulnerability
7.5
CVSS v3.1
90
Edit Score
2019-03-14
2019-03-14 20:29Z
HIGH

CVE-2018-12220 — Intel Graphics_driver: Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-12220

Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access. CVSSv3.1 8.2 (HIGH) · EPSS 37th percentile

VNDIntelVNDLogicTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2019-03-14
2019-03-14 20:29Z
HIGH

CVE-2018-12216 — Intel Graphics_driver: Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-12216

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access. CVSSv3.1 8.2 (HIGH) · EPSS 38th percentile

CWECWE 20VNDIntelVNDKernelTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2019-03-14
2019-03-14 20:29Z
HIGH

CVE-2018-12214 — Intel Graphics_driver: Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-12214

Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access. CVSSv3.1 8.2 (HIGH) · EPSS 35th percentile

CWECWE 119VNDIntelVNDPotentialTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2019-03-08
2019-03-08 21:29Z
CRIT

CVE-2019-9636 — Python Python: 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-9636

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a d CVSSv3.1 9.8 (CRITICAL) · EPSS 95th percentile

CWECWE 173VNDFedoraprojectTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2019-02-26
2019-02-26 23:29Z
CRIT

CVE-2019-9201 — Phoenixcontact Ilc_131_eth_firmware: Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-9201

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories. CVSSv3.1 9.8 (CRITICAL) · EPSS 81th percentile

CWECWE 306VNDPhoenixcontactVNDPhoenixTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2019-02-26
2019-02-26 02:29Z
CRIT

CVE-2019-9169 — Gnu Glibc: In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-9169

In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. CVSSv3.1 9.8 (CRITICAL) · EPSS 92th percentile

CWECWE 125VNDGnuVNDNetappTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2019-02-05
2019-02-05 20:29Z
HIGH

CVE-2018-20250 — Rarlab Winrar: In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-20250in the wild

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path. CVSSv3.1 7.8 (HIGH) · EPSS 100th percentile

CWECWE 22CWECWE 36VNDWinrarVNDRarlabTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
100
Edit Score
2019-02-05
2019-02-05 06:29Z
CRIT

CVE-2018-20753 — Kaseya Virtual_system_administrator: VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-20753in the wild

Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild. CVSSv3.1 9.8 (CRITICAL) · EPSS 98th percentile

VNDKaseyaTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2019-02-05
2019-02-05 06:29Z
CRIT

CVE-2017-18362 — Connectwise Manageditsync: integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-18362in the wild

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both re CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile

CWECWE 89VNDConnectwiseTYPVulnerabilitySTAitw exploited
9.8
CVSS v3.1
100
Edit Score
2019-01-31
2019-01-31 18:29Z
MED

CVE-2019-6111 — Openbsd Openssh: However, the scp client only performs cursory validation of the object name returned (only

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-6111

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can m CVSSv3.1 5.9 (MEDIUM) · EPSS 99th percentile

CWECWE 22VNDCanonicalVNDWinscpTYPVulnerability
5.9
CVSS v3.1
97
Edit Score
2019-01-31
2019-01-31 18:29Z
MED

CVE-2019-6110 — Openbsd Openssh: In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-6110

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred. CVSSv3.1 6.8 (MEDIUM) · EPSS 98th percentile

CWECWE 838VNDWinscpVNDNetappTYPVulnerability
6.8
CVSS v3.1
90
Edit Score
2019-01-24
2019-01-24 16:29Z
HIGH

CVE-2019-1669 — Cisco Secure_firewall_threat_defense: A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-1669

A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service (DoS) condition. The vulnerability exists because the affected software improperly manages system memory resources when inspecting traffic. An attacker could exploit this vulnerability by generating specific traffic patterns for the software to inspect. CVSSv3.1 8.6 (HIGH) · EPSS 67th percentile

CWECWE 693VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2019-01-22
2019-01-22 14:29Z
MED

CVE-2018-13374 — Fortinet Fortiadc: A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2018-13374in the wild

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one. CVSSv3.1 4.3 (MEDIUM) · EPSS 98th percentile

CWECWE 732VNDFortinetVNDAccessTYPVulnerabilitySTAitw exploited
4.3
CVSS v3.1
83
Edit Score